Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: JEyElyFRn0ODlUz5s07O8KE2Bl1oqs7petXUh/HW8KY=
Subject key identifier: 5B:F8:D4:3F:4E:A1:43:8B:B7:1F:30:36:85:19:EC:7C:D3:99:A7:E1
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 019E2BBA5D1B586DD65EACA169A8C7D519B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 14AD
Signing time: Fri 15 May 2026 13:01:34 +0000
Manifest this update: Fri 15 May 2026 13:01:34 +0000
Manifest next update: Sat 16 May 2026 13:01:34 +0000
Files and hashes: 1: 2Pl1WOLsPcEe3IssGI6GqTdAUd8.roa (hash: xEvziGYE9gFL6LzKGBIz1s8KI0YFj5pJymQRSZymNEM=)
2: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: KXTPCnjyXajn+df9bUrlcHStH6IkUwPT8MFH1sC1k/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:ba:5d:1b:58:6d:d6:5e:ac:a1:69:a8:c7:d5:19:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: May 15 13:01:34 2026 GMT
Not After : May 16 13:01:34 2026 GMT
Subject: CN=5bf8d43f4ea1438bb71f30368519ec7cd399a7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:0f:1b:6f:54:34:30:fe:ba:4c:f2:84:a1:
3a:dd:7c:42:95:eb:bc:1c:dc:7f:c4:17:85:fc:d0:
b5:c5:23:14:13:28:0f:0d:5c:75:04:78:bb:3f:ae:
1b:2e:41:1f:f5:07:d9:fc:26:21:4f:af:56:82:93:
e2:f5:76:48:1f:6c:2a:23:1b:7b:ea:df:70:02:9c:
5f:e5:f7:e1:58:3c:9f:fb:99:80:67:e5:db:d9:8d:
8f:a8:e8:ff:cc:89:da:aa:06:00:55:e8:ec:aa:0a:
ce:6f:5a:86:5f:ea:85:a8:38:f6:2c:b8:15:68:e3:
78:1e:f0:30:9a:fb:f9:dc:bc:2a:59:43:89:2c:7e:
14:b2:92:e5:1a:fe:8b:a5:5c:e0:ce:06:fe:fe:14:
5e:54:c9:d3:7b:52:3a:97:67:43:20:5a:f4:71:a1:
c9:7b:fb:62:76:e0:a0:cc:46:74:86:c1:2b:dc:b7:
a1:98:c7:14:99:47:fb:79:03:0c:a2:96:b9:b5:23:
cd:a4:c2:0d:f3:f3:d4:b3:18:69:06:4a:11:40:fc:
b8:8e:80:27:60:ba:8b:88:4d:06:4e:c3:a4:ec:6b:
cf:52:4b:5a:aa:46:1f:a4:3e:5a:13:08:00:ec:2c:
78:dd:ad:f0:6a:93:a5:c6:d1:0b:cc:33:48:81:0e:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F8:D4:3F:4E:A1:43:8B:B7:1F:30:36:85:19:EC:7C:D3:99:A7:E1
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e9:b9:37:85:64:df:22:f1:f2:de:54:4a:0d:0f:ba:fa:3a:
b1:13:9b:10:e5:93:fa:b5:17:f7:9c:a8:7c:e5:9b:e6:d8:b5:
f3:c2:e1:c1:36:81:c5:de:cd:f9:e2:d9:0e:96:23:91:85:55:
5c:e4:e7:cb:5d:cc:a0:51:f8:65:31:cd:43:8f:ed:fe:4e:99:
3a:2e:18:75:19:db:d9:04:74:4b:c0:4a:56:70:cd:69:05:78:
17:13:3d:ab:b8:b1:72:61:09:e4:f4:e7:15:7b:df:fd:aa:bc:
73:8a:ab:35:21:fb:36:68:83:b5:b7:64:ad:45:6b:dc:28:7a:
b1:38:33:97:cf:6a:45:31:e1:5b:d6:69:51:d2:9b:4c:ca:21:
fa:22:b8:b0:7d:27:46:fb:2b:f7:a4:bf:c8:de:59:79:42:d0:
63:4f:81:90:21:d4:d6:c1:68:b7:12:0b:30:be:28:72:77:e9:
69:e0:ff:b3:69:85:00:85:61:6e:63:42:a7:b8:26:fa:ed:39:
6c:b1:58:bc:cd:67:d1:b2:8a:f0:c1:db:0e:b3:96:84:a2:f9:
64:1c:45:75:9d:8f:5d:81:38:f3:2b:64:5a:c7:0b:5a:1e:50:
9b:de:00:60:18:80:90:1c:27:7c:4b:16:56:e9:05:21:73:ce:
03:13:0a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 14:25:46 2026 by rpki-client